We all love encryption. If you use Gmail in an enterprise setting, especially if your work includes sensitive information, you probably love it even more. Certain Gmail app users on iOS and Android phones can now send and receive encrypted emails within the app itself — no add-ons necessary.

Previously, Gmail users could only send emails via end-to-end encryption (E2EE) on their desktops. Google’s announcement said there is «no need to download extra apps or use mail portals.» Customers can simply compose and read encrypted emails on the Gmail app itself on their iOS and Android phones.

But not all Gmail consumers will be able to use the new feature. It’s only available for Enterprise Plus subscribers with the Assured Controls or Assured Controls Plus add-on. Enterprise Plus is a subscription plan, one of several within Google Workspace. Plus is intended for large businesses and other organizations and offers higher data security and client-side encryption, which the less expensive Enterprise Standard lacks.

Assured Controls and Assured Controls Plus are designed to increase digital sovereignty, data residency and compliance.

More from ZDNET: The Best Email Encryption Software of 2026: Expert Tested

Google said the feature is designed to allow users to «engage with your organization’s most sensitive data from anywhere on their mobile devices while ensuring data remains compliant.»

With the new feature, Gmail app users can send encrypted emails to anyone, even if they aren’t using Gmail. If the recipient is using the Gmail app, the encrypted email will appear like any other email in their inbox. If the recipient is not using the Gmail app, they can still read the encrypted email and reply to it on their own browser — with the entire conversation remaining encrypted.

For example, say a Gmail app customer sends an encrypted message to someone using an iPhone with the native iPhone email app. That person using the iPhone will still be able to read the encrypted email and then answer back with an encrypted message.

Enterprise Plus customers can use the new feature now, whether they are on either the Rapid Release or Scheduled Release domains. To encrypt an email, click the lock icon and select additional encryption. Then create your message.

Business and organization administrators must enable the Android and iOS clients in the CSE admin interface in the Admin Console to grant access to their Gmail users.

Proton is an alternative for businesses and consumers

Proton Workspace, an enterprise solution that launched last month, also has end-to-end email encryption but with the added benefit of being based in Europe (Switzerland), which does have to comply with the US CLOUD Act and, thus, hand over data to the US government.

For the everyday consumer, Proton Mail has end-to-end email encryption and is available for free or in paid plans, some of which include bundled privacy and security apps, like a VPN and a password manager.